dsh-code-security 0.3.1 → 0.3.2

package/lib/runner.js

@@ -10,26 +10,25 @@ export function createSubprocessRunner(spawn, graceMs, defaultTimeoutMs) {
             const timeoutMs = options?.timeoutMs ?? defaultTimeoutMs;
             const controller = new AbortController();
             const timer = setTimeout(() => controller.abort(new Error('git diff timed out')), timeoutMs);
-            let handle;
             try {
-                handle = spawn({
+                const handle = spawn({
                     argv,
                     cwd: process.cwd(),
                     stdio: { stdin: 'ignore', stdout: { maxBytes: COLLECT_BYTES }, stderr: { maxBytes: COLLECT_BYTES } },
                     graceMs,
                     signal: controller.signal,
                 });
+                const outcome = await handle.done;
+                return {
+                    exitCode: outcome.exitCode,
+                    signal: outcome.signal,
+                    stdout: handle.collected.stdout?.readFrom(0).text ?? '',
+                    stderr: handle.collected.stderr?.readFrom(0).text ?? '',
+                };
             }
             finally {
                 clearTimeout(timer);
             }
-            const outcome = await handle.done;
-            return {
-                exitCode: outcome.exitCode,
-                signal: outcome.signal,
-                stdout: handle.collected.stdout?.readFrom(0).text ?? '',
-                stderr: handle.collected.stderr?.readFrom(0).text ?? '',
-            };
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-code-security",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "DSH AI 代码安全审查插件：secure_scan/secure_diff/secure_fix_verify/secure_report/secure_export/secure_baseline/secure_deps/secure_policy_show/secure_policy_set 九工具，40+ 确定性规则、密钥熵检测、git diff/staged 审查、SARIF 导出、基线接受与 SBOM-lite，零运行时依赖。",
   "type": "module",
   "main": "lib/index.js",